Instagram Denies Data Breach, Fixes Unsolicited Password Reset Requests
Though the emails were triggered by an 'external party,' Instagram's systems and user accounts remain secure, the company claims.
By Jibin Joseph
Over the weekend, several Instagram users received unsolicited password-reset requests, prompting Malwarebytes to say it was related to cybercriminals stealing the sensitive information of 17.5 million Instagram accounts.
Instagram, however, says that none of its systems were hacked. The unwarranted requests were triggered by "an external party" and have since been blocked.
"We fixed an issue that let an external party request password reset emails for some people. There was no breach of our systems and your Instagram accounts are secure," Instagram said in an X post. "You can ignore those emails—sorry for any confusion."
How an external party managed to send those requests remains unclear. CyberInsider reported that the incident may be linked to a 2024 Instagram API breach that leaked the data of over 17 million users. The leaked data included users' usernames, phone numbers, email addresses, and more. We have reached out to Instagram for further clarification.
For now, all users should ignore any unprompted password reset emails they receive. If you receive the email, consider resetting your password directly via the app. To do so, go to Settings and activity > Accounts Center > Password and security > Change password.
On the same page, you can also set up two-factor authentication. Doing so ensures no one can log in to your account without receiving an authentication code from your end. Go to Accounts Center > Password and security > Two-factor authentication > [your account] and select your preferred authentication method. You can choose to receive the code via an authenticator app or SMS; the former is more highly recommended.
On a lighter note, X's product head, Nikita Bier, took the opportunity to take a dig at Instagram's sister platform, Threads. "I'm glad you shared this on X, because no one would see it on Threads," Bier commented under Instagram's tweet.